SELinux

[Alan Cox]

On Tue, 31 Aug 2010 06:40:02 +0000
<keke at gol.com> wrote:

> > However, this is a really valuable warning / denial. Many PHP
> > frameworks tend to write temporary files. It would be nice to have
> > the system deny those files if they're not in the expected places.
> 
> You are developing a PHP application which will be deployed on a
> server. And you are using SELinux as a debugging tool.

SELinux is useful in that role yes - and it's very useful in production
because all sorts of joyously wonderful people try and debug your PHP
shopping cart when its in production.

Alan